Read the docs

Advantive

Records2All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Advantive records in CISA KEV
TI-2024-38196 Advantive VeraCore Unrestricted File Upload Vulnerability Priority CRITICAL 100KEV 2025-03-10TI-2025-18850 Advantive VeraCore SQL Injection Vulnerability Priority CRITICAL 92KEV 2025-03-10

Components

Products in the NVD configurations · select one to filter the records
Veracore 2 records CRITICAL

Records

2 records

TI-2024-38196 CVE-2024-57968 · GHSA-gx78-3r6j-qx7f

Unrestricted file upload in Advantive VeraCore

Priority CRITICAL 100KEV

Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.32284 Published 2025-02-03 Fixed in 2024.4.2.1 CWE-434
TI-2025-18850 CVE-2025-25181 · GHSA-6g37-4665-5v4w

SQL injection in Advantive VeraCore

Priority CRITICAL 92KEV

A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the PmSess1 parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.55549 Published 2025-02-03 No fix listed CWE-89
Open these records in search →